Legal
Effective Date: September 9, 2026 · Last Updated: October 11, 2026
Sala Club NorthBay LLC, doing business as SC NorthBay ("SC NorthBay," "we," "us," or "our"), operates the scnorthbay.com website, the SC NorthBay web app at app.scnorthbay.com, and the SC NorthBay mobile app for iOS and Android (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.
It applies to everyone who uses the Service: parents and guardians, adult players, coaches, team managers, referees, employees, club administrators, and guests who register for a tournament or camp without an account.
By using the Service you agree to this Privacy Policy. Our Terms of Service govern your participation in SC NorthBay programs. The club's waivers, including the Media Release, are separate documents you sign in the app.
Accounts are for adults (18 and older). Children under 18 do not create accounts or sign in. A parent or legal guardian creates the family account and provides information about each child who plays. Adult players who join adult programs hold their own account. Coaches, managers, referees, employees, and administrators hold staff accounts created by the club.
Account and profile. Name, email address, phone number, and password. Firebase Authentication stores only a hashed form of your password; we never see it. You may also add a profile photo, home address, and a second parent or guardian's name, email, and phone.
Emergency contacts. The names, phone numbers, and relationships of the emergency contacts you list.
Preferences. Language, preferred contact method and times, carpool and volunteer interests, notification settings, display mode, and how coaches' names appear in your event list.
Children (players). For each child you register: first and last name, date of birth, gender, school grade, jersey size, years playing, photo, and the teams, memberships, leagues, camps, and tournaments they take part in. We also collect the medical information you provide so staff can keep your child safe: allergies, medications, medical conditions, and any additional notes. Profiles created before August 2026 may still hold insurance and doctor details entered at that time; the app no longer collects or displays those fields.
Adult players. The same player fields for yourself, including medical information.
Staff. Coaches: display name, phone, address, and emergency contact. Referees: certification level and expiry date. Employees: department and permissions. Managers: permissions.
Waivers and signatures. When you sign a waiver in the app or through an emailed signing link, we record your typed name, your drawn signature image, the date and time, the IP address and browser or device you signed from, the version of the waiver, and the child and event it covers. We generate a signed PDF that carries these details. If you sign on paper, club staff may upload a photo or scan of the signed document, which can show names, signatures, and emergency and medical information.
Payments. Card details are entered into fields hosted by Stripe, our payment processor, and go directly to Stripe. We never receive or store your full card number. We keep your Stripe customer ID, the card brand, the last four digits, and the expiration date, along with your charges, invoices, receipts, balance, payment plan, and the reason for any declined payment. If you pay by cash or check, staff record the amount and date.
Messages. Messages you send or receive in the app, including the subject, body, sender and recipient names and email addresses, read status, and any attachments (images, PDFs, or video).
Text-message sign-up. If you sign up for text messages, the mobile number you confirm with a one-time code; when and how you agreed (the date and time, the version of the wording you agreed to, and the IP address and browser or device you used); and whether you later turned texts off or replied STOP.
Guest registrations without an account. If you register an outside team for a tournament, we collect the team name and the contact's name, email, and phone. If you register a camper who is not a club member, we collect the camper's name and date of birth and the parent or guardian's name, email, and phone. Payment goes through Stripe as described above.
Correspondence. Anything you send us by email.
Push notification tokens. If you allow notifications, the app registers a device token with Firebase Cloud Messaging (Google) and, on iPhone and iPad, Apple Push Notification service. We store that token and the platform (iOS, Android, or web) on your private profile so we can deliver notifications to your device. The token is removed when you sign out, and tokens that stop working are pruned automatically.
Activity records. Event check-ins for players, coaches, referees, employees, and parents; event registrations and confirmations; achievement badges awarded to players and whether you have viewed them; which broadcasts you have read; and timestamps showing when records were created and updated.
Device and log data. When you use the Service, our hosting provider (Google Cloud) logs your IP address, browser or device type, the pages or functions you request, and timestamps. We use these logs to run and secure the Service and to diagnose errors.
Browser storage. The web app stores your display mode and a venue filter setting in your browser's local storage so they survive reloads. We do not use advertising cookies, and the app contains no analytics or advertising trackers.
Website visit statistics. On the public website (scnorthbay.com only, not the app) we use Plausible Analytics, a privacy-focused service that sets no cookies and does not track you across sites. It records the page visited, the referring site, browser and device type, screen size, and an approximate location derived from your IP address, which is not stored; we also count clicks on register, sign-in, contact and outbound links together with the page you were on. These statistics are aggregated and cannot identify you.
Camera and photos. The app asks for camera or photo library access only when you choose to take or upload a photo, or when staff scan a check-in QR code. Camera frames used for QR scanning are not stored.
If you sign in with Google or Apple, we receive your name, your email address, and a provider identifier. Apple may give us a private relay address instead of your real email if you choose "Hide My Email." We never receive your Google or Apple password.
We use personal information to:
We do not use your information for targeted advertising, and we do not sell it.
The Service is a club community tool, so some information is visible to other members:
Signed waiver PDFs and uploaded paper-waiver captures are visible only to club staff.
The mobile number you confirm for text messages, and the record of your sign-up, are visible only to you and club administrators. They are kept apart from your profile.
Service providers. These companies process data on our behalf so the Service can operate. Each is bound by its own privacy terms.
| Provider | What it does for us | What it receives |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in, database, file storage, server functions, web hosting, and push-notification delivery | All data stored in the Service, including photos and files, and device tokens |
| Stripe | Payment processing, recurring billing, and card storage | Your name, email, the card details you enter, charge amounts and descriptions, and our internal account ID |
| Resend | Delivers our transactional email | Recipient name and email and the email content, which can include children's names, amounts due, check-in QR codes, and attached waiver PDFs |
| Twilio | Sends our text messages and the one-time codes that confirm your number | Your mobile number and the text content, which can include an event's name, date, time, and venue |
| Apple and Google | Sign in with Apple and Google, push delivery on iOS and Android, and app distribution | Sign-in identity, device tokens, and notification content |
| Google Fonts and cdnjs (Cloudflare) | Deliver fonts and scripts for the website and app | Your IP address and browser details when those files load |
| Plausible Insights OÜ (Plausible Analytics) | Aggregated, cookieless visitor statistics for the public website (scnorthbay.com) | Page visited, referrer, browser and device type, screen size, and your IP address, used briefly to derive an approximate location and a same-day visitor hash and not stored |
Tournament organizers, leagues, and governing bodies. When your child plays in an away tournament or a league run by another organization, we may share roster information (name, date of birth, and team) as that organization requires.
Legal and safety. We may disclose information to comply with law, respond to lawful requests, protect the rights and safety of players, staff, and others, or enforce our Terms of Service.
Business transfers. If SC NorthBay is sold, merged, or reorganized, personal information may transfer to the successor, who must honor this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Photos are stored in Firebase Cloud Storage. Profile photos, team photos, venue photos, and message attachments are viewable by signed-in members of the Service. Waiver captures and signed waiver PDFs are limited to staff. You can replace or remove your own and your children's profile photos from the profile pages, or ask us to remove any photo by email.
Promotional use of photos and video taken at club activities, such as on the website or social media, is covered by the Media Release waiver, not by this policy.
Push notifications. You control push permission in your device settings and can turn categories and individual notifications on or off under Settings → Notifications in the app. Push content may include names, event details, and amounts due.
Email. We send transactional email from no-reply@scnorthbay.com through Resend: account setup and password resets, registration and membership decisions, camp and tournament confirmations (with waiver PDFs and check-in QR codes attached), schedule changes and cancellations, payment approvals, receipts, and payment reminders. You can turn off email categories that duplicate a push notification under Settings → Notifications. Account and financial emails are always sent because they are records of your account.
Text messages. Text messages are optional and off unless you sign up under Settings → Text Messages in the app and confirm your number with a one-time code. We text you only when a practice, game or event you're part of is changed or cancelled, so message frequency varies. Message and data rates may apply. Reply STOP to any text to opt out, or turn texts off in the app; reply HELP for help. Signing up is never a condition of using the Service or joining a program. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties. Separately, if you list a phone number on your profile, club staff may call or text you directly.
Access and update. Sign in to edit your profile, your children's profiles, emergency contacts, preferences, and payment methods.
Delete. Open Settings → Account → Delete Account in the app to delete your account and your children's records yourself. You can also email info@scnorthbay.com from the address on your account; we will verify the request and confirm when it is complete.
Notifications. See Section 8.
Media release. You may revoke the Media Release waiver by writing to us. Revocation does not affect prior use.
California residents. California law may give you the right to know what personal information we collect, use, and share; to request deletion or correction; to opt out of sale or sharing (we do not sell or share personal information); and not to be discriminated against for exercising these rights. To make a request, email info@scnorthbay.com. You may authorize an agent to act for you; we will ask for proof of authorization and may verify your identity directly. Under California's "Shine the Light" law you may ask what personal information we disclosed to third parties for their direct marketing; we make no such disclosures.
Do Not Track. The Service does not respond to browser "Do Not Track" signals because we do not track users across third-party sites.
Data is encrypted in transit and at rest by Google Cloud. Access is controlled by Firebase Authentication and by role-based security rules for the database and file storage. Card numbers are handled only by Stripe, a PCI DSS Level 1 service provider. Staff access to medical and waiver records is limited to the roles that need it. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as required by law.
The Service is hosted on Google Cloud in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States. Website visit statistics for scnorthbay.com are processed and stored by Plausible in the European Union.
The Service links to Stripe, Google, Apple, and other third-party sites and services. Their privacy policies, not ours, govern what they collect.
We may update this policy. We will post the new version with a new effective date and, for material changes, notify you by email or in the app. Continued use after the effective date means you accept the updated policy.
Sala Club NorthBay LLC (doing business as SC NorthBay)
Email: info@scnorthbay.com
Website: scnorthbay.com
Mailing address: 1300 Wooden Valley Cross Road, Napa, CA 94558